OS Architecture Discovery Via Grep

Rule Info

Name
OS Architecture Discovery Via Grep
Author
Joseliyo Sanchez, @Joseliyo_Jstnk
Description
Detects the use of grep to identify information about the operating system architecture. Often combined beforehand with the execution of "uname" or "cat /proc/cpuinfo"
Date
2023-06-02 00:00:00
Modified
None
Id
d27ab432-2199-483f-a297-03633c05bae6
Tags
attack.discovery attack.t1082 DEMO
Type
Community Rule

Rule History

Author
Title
Date
Commit
github-actions[bot]
Merge PR #4791 from @nasbench - Promote older rules status from `experimental` to `test`
2024-04-01
jstnk9
feat: new linux rules related to GobRAT malware (#4272)
2023-06-02